Guangliang Yang

30 papers A* 18A 3C 1Journal 5Unranked 3
YearRankTypeTitle / Venue / Authors
2025 A* conf
Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications.
SP
Fengyu Liu, Yuan Zhang, Tian Chen, Youkun Shi, Guangliang Yang, Zihan Lin, Min Yang, Junyao He, Qi Li
2025 A* conf
Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection.
USENIX Security Symposium
Zihan Lin, Yuan Zhang, Jiarun Dai, Xinyou Huang, Bocheng Xiang, Guangliang Yang, Letian Yuan, Lei Zhang, Tian Chen, Min Yang
2025 J jnl
Facilitating Access Control Vulnerability Detection in Modern Java Web Applications With Accurate Permission Check Identification.
IEEE Trans. Inf. Forensics Secur.
Youkun Shi, Fengyu Liu, Guangliang Yang, Yuan Zhang, Yinzhi Cao, Enhao Li, Xin Tan, Xiapu Luo, Min Yang, Siyi Chen
2025 A* conf
MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications.
SP
Fengyu Liu, Youkun Shi, Yuan Zhang, Guangliang Yang, Enhao Li, Min Yang
2025 J jnl
PHPJoy: A Novel Extended Graph-Based PHP Code Analysis Framework.
IEEE Trans. Software Eng.
Youkun Shi, Yuan Zhang, Tianhan Luo, Guangliang Yang, Shengke Ye, Chengyu Yang, Fengyu Liu, Xiapu Luo, Min Yang
2025 A* conf
The Skeleton Keys: A Large Scale Analysis of Credential Leakage in Mini-apps.
NDSS
Yizhe Shi, Zhemin Yang, Kangwei Zhong, Guangliang Yang, Yifan Yang, Xiaohan Zhang, Min Yang
2024 J jnl
Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications.
Proc. ACM Softw. Eng.
Keke Lian, Lei Zhang, Guangliang Yang, Shuo Mao, Xinjie Wang, Yuan Zhang, Min Yang
2024 A* conf
Jasmine: Scale up JavaScript Static Security Analysis with Computation-based Semantic Explanation.
SP
Feng Xiao, Zhongfu Su, Guangliang Yang, Wenke Lee
2024 J jnl
The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems.
IEEE Trans. Inf. Forensics Secur.
Zhibo Zhang, Lei Zhang, Guangliang Yang, Yanjun Chen, Jiahao Xu, Min Yang
2023 A* conf
NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic.
CCS
Peng Deng, Zhemin Yang, Lei Zhang, Guangliang Yang, Wenzheng Hong, Yuan Zhang, Min Yang
2023 A* conf
Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps.
USENIX Security Symposium
Shuai Li, Zhemin Yang, Guangliang Yang, Hange Zhang, Nan Hua, Yurui Huang, Min Yang
2023 — conf
TrustedDomain Compromise Attack in App-in-app Ecosystems.
SaTS@CCS
Zhibo Zhang, Zhangyue Zhang, Keke Lian, Guangliang Yang, Lei Zhang, Yuan Zhang, Min Yang
2022 A* conf
Collect Responsibly But Deliver Arbitrarily?: A Study on Cross-User Privacy Leakage in Mobile Apps.
CCS
Shuai Li, Zhemin Yang, Nan Hua, Peng Liu, Xiaohan Zhang, Guangliang Yang, Min Yang
2022 A* conf
Identity Confusion in WebView-based Mobile App-in-app Ecosystems.
USENIX Security Symposium
Lei Zhang, Zhibo Zhang, Ancong Liu, Yinzhi Cao, Xiaohan Zhang, Yanjun Chen, Yuan Zhang, Guangliang Yang, Min Yang
2022 A* conf
Understanding and Mitigating Remote Code Execution Vulnerabilities in Cross-platform Ecosystem.
CCS
Feng Xiao, Zheng Yang, Joey Allen, Guangliang Yang, Grant Williams, Wenke Lee
2021 A* conf
Abusing Hidden Properties to Attack the Node.js Ecosystem.
USENIX Security Symposium
Feng Xiao, Jianwei Huang, Yichang Xiong, Guangliang Yang, Hong Hu, Guofei Gu, Wenke Lee
2021 A* conf
SEPAL: Towards a Large-scale Analysis of SEAndroid Policy Customization.
WWW
Dongsong Yu, Guangliang Yang, Guozhu Meng, Xiaorui Gong, Xiu Zhang, Xiaobo Xiang, Xiaoyu Wang, Yue Jiang, Kai Chen, Wei Zou, Wenke Lee, Wenchang Shi
2021 J jnl
SEPAL: Towards a Large-scale Analysis of SEAndroid Policy Customization.
CoRR
Dongsong Yu, Guangliang Yang, Guozhu Meng, Xiaorui Gong, Xiu Zhang, Xiaobo Xiang, Xiaoyu Wang, Yue Jiang, Kai Chen, Wei Zou, Wenke Lee, Wenchang Shi
2021 A conf
The Service Worker Hiding in Your Browser: The Next Web Attack Target?
RAID
Phakpoom Chinprutthiwong, Raj Vardhan, Guangliang Yang, Yangyong Zhang, Guofei Gu
2020 — conf
MinerGate: A Novel Generic and Accurate Defense Solution Against Web Based Cryptocurrency Mining Attacks.
CNCERT
Guorui Yu, Guangliang Yang, Tongxin Li, Xinhui Han, Shijie Guan, Jialong Zhang, Guofei Gu
2020 A conf
Security Study of Service Worker Cross-Site Scripting.
ACSAC
Phakpoom Chinprutthiwong, Raj Vardhan, Guangliang Yang, Guofei Gu
2019 A* conf
Iframes/Popups Are Dangerous in Mobile WebView: Studying and Mitigating Differential Context Vulnerabilities.
USENIX Security Symposium
Guangliang Yang, Jeff Huang, Guofei Gu
2019 A* conf
Life after Speech Recognition: Fuzzing Semantic Misinterpretation for Voice Assistant Applications.
NDSS
Yangyong Zhang, Lei Xu, Abner Mendoza, Guangliang Yang, Phakpoom Chinprutthiwong, Guofei Gu
2018 A* conf
Automated Generation of Event-Oriented Exploits in Android Hybrid Apps.
NDSS
Guangliang Yang, Jeff Huang, Guofei Gu
2018 — conf
Machine Learning for Muon Imaging.
BICS
Guangliang Yang, David Ireland, Ralf Kaiser, David Mahon
2018 A* conf
Study and Mitigation of Origin Stripping Vulnerabilities in Hybrid-postMessage Enabled Mobile Applications.
IEEE Symposium on Security and Privacy
Guangliang Yang, Jeff Huang, Guofei Gu, Abner Mendoza
2018 A* conf
Towards Fine-grained Network Security Forensics and Diagnosis in the SDN Era.
CCS
Haopei Wang, Guangliang Yang, Phakpoom Chinprutthiwong, Lei Xu, Yangyong Zhang, Guofei Gu
2017 A conf
Precisely and Scalably Vetting JavaScript Bridge in Android Hybrid Apps.
RAID
Guangliang Yang, Abner Mendoza, Jialong Zhang, Guofei Gu
2015 C conf
Using Provenance Patterns to Vet Sensitive Behaviors in Android Apps.
SecureComm
Chao Yang, Guangliang Yang, Ashish Gehani, Vinod Yegneswaran, Dawood Tariq, Guofei Gu
2014 A* conf
AUTOPROBE: Towards Automatic Active Malicious Server Probing Using Dynamic Binary Analysis.
CCS
Zhaoyan Xu, Antonio Nappa, Robert Baykov, Guangliang Yang, Juan Caballero, Guofei Gu